Commit graph

  • 6ca8fda275 Record audit-core availability as V1 in the worked example. main tegwick 2026-09-24 15:53:09 +02:00
  • a7c02a6d69 chore(consistency): sync tegwick 2026-09-24 01:58:06 +02:00
  • 84df9bf13a chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-24 01:58:05 +02:00
  • ee8f9c8a67 NK-WP-0041-T02: rollback confirmed; 4.39 root cause and staged fix path tegwick 2026-09-24 01:57:20 +02:00
  • 329a03d149 Roll back Authelia to pinned 4.38 after 4.39.28 broke KeyCape token exchange tegwick 2026-09-24 01:54:12 +02:00
  • cc8ded3f88 Pin Authelia v4.39.28 by digest (plus-address LDAP filter fix) tegwick 2026-09-24 01:36:11 +02:00
  • 0444d7f13d NK-WP-0041-T02: diagnose Authelia plus-address filter defect; plan 4.39.28 tegwick 2026-09-24 01:26:57 +02:00
  • a4272e6526 chore(consistency): sync after workplan review tegwick 2026-09-24 01:23:47 +02:00
  • 3d546d7680 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-24 01:23:46 +02:00
  • ad4ec6e7a7 Review: NK-WP-0040 ready, NK-WP-0042 backlog (operator decision) tegwick 2026-09-24 01:23:00 +02:00
  • ae7da232ae chore(consistency): sync after NK-WP-0041-T01 tegwick 2026-09-24 01:20:43 +02:00
  • 60b7f824ee chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-24 01:20:42 +02:00
  • e1e3905e06 Pin identity-provisioner main-6c4fcaf (password-setup usability) as deployed tegwick 2026-09-24 01:19:48 +02:00
  • c9e5ead43b chore(consistency): record NK-WP-0042 hub ids tegwick 2026-09-23 22:22:44 +02:00
  • a46cc426b6 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 22:22:43 +02:00
  • 947ad50252 ADR-0016: MFA is a user preference; workloads opt in. Close NK-WP-0037. tegwick 2026-09-23 22:21:48 +02:00
  • 8ee0f8bf04 Pin KeyCape main-11ce29a (fresh-login fix) as deployed tegwick 2026-09-23 22:12:14 +02:00
  • 352bc6737a chore(consistency): record NK-WP-0041 hub ids tegwick 2026-09-23 21:49:34 +02:00
  • 1ce3588216 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 21:49:33 +02:00
  • 6c4fcaf9ae Record the human onboarding run and fix password-setup usability tegwick 2026-09-23 21:48:29 +02:00
  • 15939d00af chore(consistency): sync after NK-WP-0034 close tegwick 2026-09-23 21:21:18 +02:00
  • 30f1ea3eef chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 21:21:16 +02:00
  • 1da6e5457a Close NK-WP-0034: verify-t06 proven FAIL-then-PASS on production tegwick 2026-09-23 21:20:19 +02:00
  • a22203437b chore(consistency): sync after NK-WP-0033 close tegwick 2026-09-23 20:33:18 +02:00
  • 1d6b151cad chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 20:33:14 +02:00
  • 487c7abf65 Close NK-WP-0033 on the attended resolver --check PASS receipt tegwick 2026-09-23 20:31:16 +02:00
  • 6096c39539 chore(consistency): record NK-WP-0040 hub ids tegwick 2026-09-23 20:10:51 +02:00
  • a7a4db5a89 Record A11 r2/A12 r3 assent and the railiance-clock owner review tegwick 2026-09-23 20:08:46 +02:00
  • acf0820465 chore(consistency): record NK-WP-0039 hub task ids tegwick 2026-09-23 20:02:48 +02:00
  • 3c73f39166 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 20:02:39 +02:00
  • 47c42f33fb Adopt live flex-auth digests, record rename answers and NK-WP-0033 ruling tegwick 2026-09-23 20:01:30 +02:00
  • 444f2b3fc3 Pin approval-clients rollout tests to their pre-rollout fixture tegwick 2026-09-23 19:56:55 +02:00
  • 7d42c6b32c chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-23 19:50:05 +02:00
  • 3bdf0fceff Add NK-WP-0039 intake for the flex-auth to access-engine coordinate rename tegwick 2026-09-23 19:48:34 +02:00
  • 3b14469afb Retire bao.coulomb.social callbacks from the KeyCape openbao-admin client tegwick 2026-09-23 19:41:35 +02:00
  • a356f640ac Stop configure-openbao-oidc.sh from writing the platform-admin role tegwick 2026-09-23 19:39:53 +02:00
  • 116643fafe Declare local-identity audit emission cadence for InfoTechCanon adoption tegwick 2026-09-21 14:00:17 +02:00
  • 675a1582a2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-21 12:39:01 +02:00
  • 0b10b4b589 Declare net-kingdom's own layer and record positions on the v0.8 hold and §11 amendments. tegwick 2026-09-21 12:36:10 +02:00
  • 033b77f6ee Classify open workplans with flavor (CUST-WP-0072). tegwick 2026-09-14 15:50:43 +02:00
  • 8dc5050aa3 Pin identity-provisioner digest and readiness to directory preflight tegwick 2026-09-14 04:57:39 +02:00
  • 84c4225542 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-14 04:47:36 +02:00
  • c8e07615c3 Surface redacted directory bind failures before native onboarding tegwick 2026-09-14 04:46:29 +02:00
  • d90e3b27f2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-14 00:22:15 +02:00
  • dc42b0344c Record canonical portal hostname and callback cutover tegwick 2026-09-14 00:16:33 +02:00
  • bea425cf78 Record deployed P06 policy and completed platform acceptance tegwick 2026-09-14 00:10:26 +02:00
  • a5496170cf Implement scoped P06 authentication policy and guarded optional onboarding tegwick 2026-09-14 00:00:09 +02:00
  • d1a169dedd Record verified P05 rollout and service recovery acceptance tegwick 2026-09-13 22:31:16 +02:00
  • ce695337f5 Record completed P04 recovery rollout and acceptance tegwick 2026-09-13 21:19:13 +02:00
  • 7df21d188b Connect P04 audited recovery to fresh-MFA platform browser flow tegwick 2026-09-13 21:05:33 +02:00
  • 54a47dd810 Record verified enrollment assurance release and automate provider contract tests tegwick 2026-09-13 17:03:44 +02:00
  • 37b4d70823 Establish scoped KeyCape factor custody and verified automatic renewal tegwick 2026-09-13 16:25:33 +02:00
  • 5f57e06cf9 Record provider credential renewal release and remaining owner handoff tegwick 2026-09-13 14:27:35 +02:00
  • 122d5deaa2 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 12:30:38 +02:00
  • 6420d80a70 Record and pin verified account journey release tegwick 2026-09-13 12:29:43 +02:00
  • 84f7635ea1 Run journey CI in a pinned Python environment tegwick 2026-09-13 12:22:17 +02:00
  • 11014b4d1c chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-13 12:21:20 +02:00
  • a0cc947bf6 Support tenant-scoped directory lifecycle with isolation tests tegwick 2026-09-13 12:20:02 +02:00
  • 0071dba99e Pin browser-verified account recovery and provider sign-out tegwick 2026-09-12 10:50:35 +02:00
  • 91ea47ad01 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-12 03:20:42 +02:00
  • 4d71e1bd16 Record deployed issuer and company-welcome configuration tegwick 2026-09-12 03:12:45 +02:00
  • eb5aac2ace chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-12 02:55:32 +02:00
  • ff1b25f515 Prepare pinned company-welcome and shared-issuer rollout patches tegwick 2026-09-12 02:53:55 +02:00
  • 3db3eae394 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-12 02:45:59 +02:00
  • 48a75b1a54 Bind password setup grants to approved company welcome pages tegwick 2026-09-12 02:43:31 +02:00
  • c8ad7a85ea docs: record verified identity provisioner credential repair tegwick 2026-09-11 22:00:37 +02:00
  • 2bc6e37f9f chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 22:00:19 +02:00
  • a158d3badb repo.work.assign_missing_identifiers repo-manager 2026-09-11 21:43:11 +02:00
  • 6a0773bcfa ops: record native tenant success and prepare attended identity repair tegwick 2026-09-11 21:41:26 +02:00
  • 6f9cfe3dfd chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 21:30:08 +02:00
  • 41840f6e95 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 21:19:17 +02:00
  • 6cd89f0a7a fix: restore native user portal login and track tenant integration tegwick 2026-09-11 20:55:30 +02:00
  • 5293a9bea3 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-11 20:55:12 +02:00
  • f9e1611cc7 Register the tenant-provenance gap in 13 (GH-DEC-2026-013) tegwick 2026-09-09 23:20:22 +02:00
  • 64394e99b9 Apply the v0.8 assent round: nine corrections, one request declined tegwick 2026-09-09 20:10:55 +02:00
  • 303a584bd0 feat: accept KeyCape approval clients with tested recovery tegwick 2026-09-09 02:18:12 +02:00
  • ce826cfa8d feat: exercise contained KeyCape approval client rollout tegwick 2026-09-09 01:32:45 +02:00
  • 896c1200c0 Record exercised live issuer pin and unchanged production deployment tegwick 2026-09-09 00:40:23 +02:00
  • ad9979b159 Add contained issuer-only configuration check and revision-guarded pin tegwick 2026-09-09 00:23:21 +02:00
  • 46455439cf chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-07 13:45:29 +02:00
  • ec1a59f274 chore(consistency): register NK-WP-0035 workplan and task identifiers tegwick 2026-09-07 08:47:38 +02:00
  • 3f51f12d90 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-07 08:47:22 +02:00
  • 165c2dc224 chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-07 08:46:51 +02:00
  • da7747dc42 Correct v0.8 §11: the emission-guarantee check contradicted the profile it cites tegwick 2026-09-07 08:44:52 +02:00
  • 31a49a43eb Correct v0.8 §9.7.3: the binding correspondence as first cut could never pass tegwick 2026-09-06 15:26:51 +02:00
  • 66eeabad38 Cut security-layer-model v0.8 (proposed) from gate-house's amendment set tegwick 2026-09-06 14:52:42 +02:00
  • 4e07d60ff1 Validate cadence contract and require functional MFA verification tegwick 2026-09-05 01:28:05 +02:00
  • d4d61b722e repo.work.assign_missing_identifiers repo-manager 2026-09-04 00:26:59 +02:00
  • af6fdb3305 Repair archived workplan task metadata tegwick 2026-09-04 00:26:50 +02:00
  • 9781102e29 Deploy KeyCape canonical subject fix tegwick 2026-09-01 00:03:08 +02:00
  • d4e57e6312 docs: refresh published security canon index tegwick 2026-08-31 21:17:38 +02:00
  • ce198fc290 derive state hub identifiers tegwick 2026-08-31 19:08:31 +02:00
  • 9a7f5c9337 Intake NET-IN-0002: amend tenant-engine boundary contract tegwick 2026-08-29 13:02:58 +02:00
  • 66dc491dc0 Accept the security layer model; companion v0.2 to the repository root tegwick 2026-08-29 11:28:49 +02:00
  • ce2554fdc9 Security Layer Model v0.7 — write the rule v0.6 only announced tegwick 2026-08-29 10:44:53 +02:00
  • 8a17551103 Add the agent companion to the security layer model tegwick 2026-08-29 09:25:40 +02:00
  • 745dffb8ac Security Layer Model v0.6 — type the engines, name the gate, hold actuation at zero tegwick 2026-08-29 03:32:58 +02:00
  • 0efa06fe5c Security Layer Model v0.5 — four reviews, nine changes tegwick 2026-08-29 02:54:25 +02:00
  • bbdff49abf Refresh work-record index tegwick 2026-08-29 02:45:20 +02:00
  • f4f013279d repo.work.create_intake NET-IN-0001 repo-manager 2026-08-28 23:01:51 +02:00